LINEAR RECURRENCE RELATIONS FOR BINOMIAL 
COEFFICIENTS MODULO A PRIME 



SANDRO MATTAREI 



Abstract. We investigate when the sequence of binomial coefBcients 
modulo a prime p, for a fixed positive integer k, satisfies a Hnear recurrence 
relation of (positive) degree h in the finite range < i < fc. In particular, 
we prove that this cannot occur li 2h < k < p — h. This hypothesis can be 
weakened to 2/i < fc < p if we assume, in addition, that the characteristic 
polynomial of the relation does not have —1 as a root. We apply our results 
to recover a known bound for the number of points of a Format curve over a 
finite field. 



1. Introduction 

As is customary, let the binomial coefficients (*^) be defined by the identity 



— ' \1 — ' 



in the ring of formal power series for fc, i G Z. In particular, (J) vanishes if 

I < or if i > fc. Consider the sequence (^) for a fixed fc. It is clearly never periodic 
on the whole range z G Z, and restricted to the range i > it is periodic exactly in 
one case, namely k = —1, where (*^) = (—!)*■ Replicas of this isolated instance in 
characteristic zero appear when the sequence (*^) is viewed modulo a prime p: the 
reduced sequence is periodic with period two in the natural range 0<j<A;iffc + l 
is a power of p. In fact, because of the identity (a + hY — + bP in characteristic 
p, in the ring ¥p[x] we have 

{l + xyf^-^ = {l + xP")/{l + x) = (l + a;P°)^(-l)V = ^ (-l)V 

i>0 i=0 

and hence = (—1)* (mod p) for < i < fc. We have proved in jMatbj 

that under some fairly natural further assumptions this is the only occurrence of 
periodicity for the sequence ( ^) mod ulo p in the range < i < k, for a fixed fc > 0. 
In particular. Corollary 4.2 of ' jMatbj asserts that if A: + 1 is not a power of p then the 
sequence of binomial coefficients (*^) modulo p, considered in the range < z < A:, 
cannot be periodic of any period h prime to p and with 2h < k. A similar assertion 
holds for the signed binomial coefficients (— In fact, both assertions hold 
under weaker and more precise assumptions, for which we refer to jMatbj . 

Since a periodicity relation is the special case of a linear recurrence relation where 
the characteristic polynomial has the form x'^ — 1, it is natural to ask when the 
sequence (J) modulo p, for k fixed, satisfies a linear recurrence relation in the range 



Date: 10 August 2005. 

2000 Mathematics Subject Classification. Primary 11B65; secondary 05A10. 
Key words and phrases. Binomial coefficient, Fermat curve, finite field, linear recurrence. 
The author is grateful to Ministero dell'Istruzione, deU'Universita e della Ricerca, Italy, for 
financial support of the project "Graded Lie algebras and pro-p-groups of finite width" . 



2 



SANDRO MATTAREI 



< i < k. Note that, in characteristic zero and in the range i > 0, the sequence 
(^) satisfies the Unear recursion with characteristic polynomial (1 + x)"*^ when 
k < (see Example |H1 for a similar instance with fc > in positive characteristic), 
and the linear recursion with characteristic polynomial x'^^^ for fc > (because the 
sequence vanishes for i > k). However, the problem becomes more interesting when 
we restrict our attention to the finite range < i < fc, for fc > 0. Naturally, the 
familiar definitions pertaining to linear recurrence relations for infinite sequences 
need to be adjusted to the case of finite sequences, as we do in Section El In 
particular, it will appear that a natural requirement to avoid degenerate cases is to 
consider linear recurrence relations of order h only for sequences of at least 2h + 1 
terms, see RemarkOand Example[7| In the case of the sequence (^) modulo p in the 
natural range < i < fc, this assumption becomes 2h < fc, which we have already 
encountered in Corollary 4.2 of |Matb| quoted above. An analogue of that result 
for linear recurrence instead of periodicity is our Theorem A simplified version 
of that asserts that the sequence of binomial coefficients (*^) modulo p restricted 
to the range < z < fc cannot satisfy a linear recurrence relation of degree h if 
< 2h < k < p ^ h. The assumption fc < p — h, which is indispensable according to 
Example IHI can be weakened to fc < p provided we assume that the characteristic 
polynomial of the linear recurrence relation does not have —1 as a root, as in 
Theorem irni 

We base our proofs of Theorems and ^| on two different methods. Both 
methods would actually work in both cases, as we explain in Remark llll but each 
method may have its own strengths in view of possible generalizations, notably to 
values of fc larger than p. The first method comes naturally from the ordinary theory 
of linear recurrent sequences and consists in evaluating certain Hankel determinants. 
We do that in Proposition 0] which may be of independent interest. The second 
method employs the generating function (1 + a;)'" for the binomial coefficients in 
a more explicit way. It is based on Lemma |21 a slight extension of an elementary 
fact taken from HBKOOj . asserting that the number of nonzero coefficients of a 
polynomial in characteristic p exceeds the multiplicity of one of its roots, provided 
that multiplicity is less than p. The characteristic zero analogue of this fact appears 
as Lemma 1 in BriOl , but may be well known. 

The same arguments employed to prove Theorems and ^1 can be used to 
recover a known bound for the number of points of a Fermat curve on a finite field. 
We do this in Section^ to which we refer for an introduction to the problem. Since 
this topic does not require an understanding of linear recurrence relations, we have 
kept Section 21 essentially independent from the rest of the paper. However, we do 
explain the connection with linear recurrence relations for binomial coefficients in 
Remark ^] 

2. Linear recurrence relations over a finite range 

In this section we recall from |LN86j some basic concepts concerning (homoge- 
neous) linear recurrences satisfied by an infinite sequence, and adapt them to finite 
sequences. 

Let a{x) = J2i>o'^i^^ be a monic polynomial of degree h (possibly zero). A 
sequence {si}i>a satisfies the (homogeneous) linear recurrence relation with char- 
acteristic polynomial a(x) if 

(1) s,j+/i = -ah-is,+h-i aos, for all i > 0. 

The degree h of a{x) is called the order of the linear recurrence relation, in analogy 
with the terminology used for linear differential equations. This definition of a 
linear recurrence relation is motivated by applications where the recurrence allows 
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one to compute Si from the h elements preceding it in the sequence. However, the 
reciprocal characteristic polynomial a*{x) — x^a{\/x) = X]i>o ^® somehow 
more suited to algebraic manipulations than the characteristic polynomial. (Note 
that a*{x) may have degree lower than a(x), namely, when oq = 0.) In particular, 
setting a* = au-i, and hence a*{x) — J2i>Q we can rewrite Q as 

a^Sj + al_iSt+i H h aQS.i+h = for all i > 0. 

These equations impose the vanishing of the coefhcient of a;*^'' in the product 
a*{x)s{x), for all i > 0, where s{x) = J2i>o^i^'' the generating function of 
the sequence {si}i>o- Therefore, a sequence {si}i>o satisfies the linear recurrence 
associated with a{x) if and only if a*{x)s(x) is a polynomial of degree less than h 
(cf. |LN86I Theorem 6.40]). 

Consider now a finite sequence {si}u<i<v, and let s{x) — J2u<i<v ^^^^ 
generating function. We may encompass the classical case of infinite sequences by 
allowing v = oo. Since we are not assuming that m > 0, in general s{x) is a formal 
Laurent series rather than an ordinary power series. 

Definition 1. Let a{x) = J2i>Q'^i^^ be a monic polynomial of degree h. The 
sequence {si}u<i<v satisfies the linear recurrence with characteristic polynomial 
a{x) if 

(2) aoSi + aiSi+i + • • • + OhSi+h =0 for u < i < v — h. 

A finite sequence {si}u<i<v satisfies the linear recurrence with characteristic 
polynomial a{x) if and only if the sequence can be extended to an infinite sequence 
{si}i>u satisfying the linear recurrence in the usual sense. This reveals a slight 
asymmetry in Definition ^ with respect to reversing the ordering of the finite se- 
quence, due to our requirement that be nonzero (and then, without loss, being 
equal to one) without a similar requirement on oq. We accept to live with this 
harmless asymmetry rather than departing from the standard terminology used for 
infinite sequences. 

Let a* (a;) = x^a{l/x) = X]i>o ^-h-iX^ be the reciprocal characteristic polynomial. 
Arguing as in an earlier paragraph we find that (jSJ is satisfied if and only if the 
coefficient of x-' in the polynomial a*{x)s{x) vanishes for u + h < j < v. In 
particular, a finite sequence {si}u<i<v satisfies vacuously any linear recurrence 
relation of order h > v — u. It also follows easily that if the sequence satisfies a 
linear recurrence relation with characteristic polynomial a{x) then it satisfies any 
linear recurrence relation whose characteristic polynomial is a multiple of a{x). 

The Hankel determinants D^'^^ = det (^(sr+i+j)i,j=o,...,h-i) play an important 
role in the ordinary theory of infinite linear recurring sequences, see ILN86I Chap- 
ter 6] . With some care some of their properties can be translated to the present 
setting of finite sequences. Here we limit ourselves to the following basic fact. 

Lemma 2. // the sequence {si}u<i<i, satisfies a linear recurrence of order h then 
D^'^+i' =0foru<r<v-2h. 

Proof. View as a system ofu— /i— w+1 homogeneous linear equations in the h+1 
indeterminates ao,...,a;j. The Hankel determinants oi'^'^^^ under consideration 
are the determinants of the subsystems consisting oi h -\- I consecutive equations. 
The existence of a nonzero solution (with au = ^ here) implies that the matrix of 
the system has rank less than h+l, and hence all Hankel determinants vanish. □ 

Note that the values for r in Lemma|21are all those for which L'f''^^'' is defined. 
In particular, the conclusion of Lemma |21 is void ii 2h > v — u. 
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Remark 3. Given a finite sequence {si}u<i<v and a positive integer h with h < 
V — u < 2h, the set oiv — h — u + 1 equations given by ^ necessarily has a nonzero 
solution (oo, . . . ,ah), but need not have any with 7^ 0. In fact, the sequence 
need not satisfy any linear recurrence relation of order h in this case, as is shown 
by the sequence with Si, = 1 and Si = for u < i < v. Nevertheless, the condition 
2/1 < w — u is a natural assumption when claiming that a finite sequence does not 
satisfy a linear recurrence relation, as in Theorems IHI and 1 1 01 below . We examine a 
specific instance in Example 

3. Linear recurrence relations for binomial coefficients 

One way of studying linear recurrence relations for the sequence of binomial 
coefficients (*^) (for k fixed) is evaluating the corresponding Hankel determinants. 
We use the notation k- = k{k — 1) • • • (fc — r + 1) for fc and r integers with r > 0, 
reading fc- = 1 . 

Proposition 4. Let k be an integer and let h, r be nonnegative integers. Let 
B{k, h, r) denote the matrix ( ( J'., ) ) . Then we have 



det{B{k,h,r))^{-lft")\{ 



^ (k + s)I±^ 



s 



Proof. We proceed by induction on h. The conclusion holds for h ^ since (^) = 
Now assume h > 0. To avoid confusion, we count the rows and columns of a 
matrix according to their index. Thus, we call 0th row the earliest row of B{k, h, r). 
We compute the determinant according to Laplace's rule, with respect to the last 
column (that is, the hth column). For i = /i, /i— 1, . . . , 1 (in this order) we subtract 
from the ith row the (h — l)st row multiplied by — 1. Using the binomial 

identities (^"J + {f) = (l+l) and Qf^ = (HI) we find that the (i,j)-entry of 
the resulting matrix, for i > 0, equals 





)- 




j. 








k + 


1 


r 


+ i 


+ j 




k + 


1 


r 


+ i 


+ j 



k \ f k+1 



- 1 



j — 1/ \r + h + i 

k \ k + 1 



1 - 



r + i + j — Ijr + h + i 
r + i + j \ f k + 1 \ h — j 



r + h + i J \r + i + j 



In particular, the h-th column of B{k,h,r) vanishes except for its (0, /i)-entry, 
which equals (^^^). Consequently, det{B{k, h,r)) equals (— l)''(^^;j) times the 
determinant of the matrix obtained by removing from it the 0th root and the hth 
column. After shifting its row-index by one, the latter matrix becomes 



(3) 



fc + 1 \ h- j 



1 + i + jJr + h + i + l 



.h-l 



By collecting the factor l/{r + h + i + 1) from the ith row and the factor h — j 
from the jth column, for each row and column, we find that the determinant of the 

matrix in ^ equals the product of ('^^f ') and det(_B(fc + 1, — 1, r + 1)). Since 
V^JC^.'")"' = (.+Sfr±^ conclude that 



det(B(fc, h, r)) = (-1)"^-^—^ . det(i?(fc + 1, - 1, r + 1)). 
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By induction hypothesis we have 



(r + 2hy-t!l fj-^^ {r + h + s} 



r+h 



\r+h 



(_1)^+Q)TT + 

s — O ^ ' 



which concludes the proof. □ 

Corollary 5. Let p be a prime and let k,h,r be integers with k,h > and < 
r + h<k<p — h. Then det{B{k, h, r)) is not a multiple of p. 

Proof. The conclusion follows from Proposition^if r > 0. The case where r < is 
reduced to the other case by means of the identity 

det(B(fc, h, r)) = det(B(fc, h,k-r- 2h)), 
which follows from the identity (*^) = ik-i) ^'^^ ^^"^ binomial coefficients. □ 

The necessity of the conditions Q < r + h < k in Corollary can also be seen by 
noting that the matrix B{k, h, —h — 1) (respectively B{k, h, k — h + 1)) has zeroes 
on and above (respectively below) its secondary diagonal. 

Our first main result states that the sequence of binomial coefficients (J) , con- 
sidered in the range i — 0, . . . , /c and reduced modulo a prime p, does not satisfy 
any recurrence relation of degree h ii 2h < k < p ~ h. However, in view of an 
application in the next section it is convenient to allow a more general range for i. 

Theorem 6. Let p be a prime, k, h nonnegative integers, and u, v integers with 

—h <u<v<k + h, 2h < V — u, and k < p ^ h. 

Then the sequence of binomial coefficients (^) modulo p, considered in the range 
u < i < V, does not satisfy any linear recurrence relation of order h. 

Proof. Suppose for a contradiction that the sequence under consideration satisfies 
a linear recurrence relation of order h. According to Lemma 12 the Hankel de- 
terminants Dr''^^^ of the sequence vanish for u < r < v — 2h. Since dI'^'^^'^ is 
the reduction modulo p of det{B(k, h,r)), it follows in particular that p divides 
det{B{k, h,u)). This contradicts Corollary □ 

The extreme case ft, = of ThcorcmElamounts to the simple fact that p does not 
divide (^) for < z < /c < p. CorollaryOand Theorem^lcan be interpreted in char- 
acteristic zero by reading p ~ oo (or, equivalently, by disregarding the hypotheses 
which involve p) . 

We present a couple of examples to justify the hypotheses 2h + u + v < k and 
k < p ~ h in Theorem El which are of a quite different nature. 

Example 7. Work in characteristic zero first, and let fc, h be integers with < 
2h — I = k. Then the sequence of binomial coefhcients (*^), considered in the 
range < i < k, satisfies a unique linear recurrence relation of order h. In fact, we 
may set at = 1 and view Q as a system of k + 1 — 2h linear equations in the h 
indeterminates ag, . . . , Oh-i- Since its matrix B(k, ft— 1, 0) is nonsingular according 
to Proposition ^ the system has a unique solution, which can be computed by 
means of the Berlekamp-Massey algorithm described in |LN86I Chapter 6, §6]. 
Consequently, the reduction of the sequence modulo any prime p also satisfies a 
linear recurrence, and this is unique if p > fc + ft according to Corollary|S| 
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Example 8. If g is a power of the prime p and Q < h < q then the sequence of 
binomial coefiicients {^^^^ modulo p, considered in the range —h + l<i<(7— 1 
(which includes the more natural range < i < q~h), satisfies the linear recurrence 
relation with (reciprocal) characteristic polynomial (1 + a;)''. This is so because the 
product of its generating function (1 + a;)'?"'' with (1 + a;)'' equals 1 + x', whose 
coefficients of degrees 1, . . . , g — 1 vanish. 

As Example IHl suggests, it is possible to weaken the hypothesis that k < p — h 
in Theorem El to k < p provided one assumes that the characteristic polynomial of 
the linear recurrence relation does not have 1 as root. This can be established by 
a variation of the method of proof of Theorem which we sketch in Remark 1111 
below. However, it is simpler to base a proof on a different method. We need the 
following refinement of Lemma 6 of HBKOO, , which had the stronger hypothesis 
deg(/) < p. We call weight of a polynomial the number of its nonzero coefficients. 

Lemma 9. Let f{x) be a polynomial over a field of characteristic p having a nonzero 
root ^ with multiplicity exactly k, with < k < p. Then f{x) has weight at least 
k + 1. 

Proof. If ^ is a root of f(x) with multiplicity exactly k, then f{£,^^x) has 1 as a 
root with the same multiplicity, and has the same weight as f{x). Hence we may 
assume that ^ = 1. We proceed by induction on k. The case k = 1 being obvious, 
assume that k > 1. By dividing f{x) = fiX^ by a suitable power of x, which 
leaves its weight unchanged, we may assume that /o ^ 0. Since p does not divide 
k, the derivative 

/'(a;)-^z/,a;^-i 

i 

has 1 as a root with multiplicity exactly fc — 1, and has weight one less than the 
weight of f{x). By induction, f'{x) has weight at least k, and hence f{x) has weight 
at least k + 1. □ 

Theorem 10. Let p be a prime, k, h nonnegative integers, and u, v integers with 

—h <u<v<k + h, 2h < V — u, and k < p. 

Then the sequence of binomial coefficients (*^) modulo p, considered in the range u < 
i < V, does not satisfy any linear recurrence relation of order h with characteristic 
polynomial prime to x + 1. 

Proof. Suppose that the sequence under consideration satisfies a linear recurrence 
relation with characteristic polynomial a{x), of degree h and not having —1 as a 
root. Therefore, the coefficient of x^ in the polynomial a*{x){l + x)^ vanishes for 
u + h < j < V. Consequently, a*{x){l + x)*' has weight at most k + 2h — v + u. 
However, according to LemmaElthe weight of a*{x){l + x)^ is at least k + 1. It 
follows that 2h>v — u + 1, which contradicts one of our hypotheses. □ 

Remark 11. We mentioned above that the method of proof of Theorem can 
be adapted to give a proof of Theorem EH We briefly sketch the corresponding 
argument. Assume that p — h < k < p, otherwise Theorem applies. As in 
the proof of Lemma [3 one may view (|2Jl as a system ofv — h — u+1 homogeneous 
linear equations in the h+1 indeterminates uq, . . . , a^. The matrix of the subsystem 
formed by the first h+1 equations equals the reduction modulop of B(k, h, u), whose 
determinant vanishes according to Corollary [3 However, one can use Corollary El 
to show that the matrix has rank at least p — k. (It will turn out that the matrix 
has rank exactly p — fc.) Therefore, the space of solutions of the system Q has 
dimension at least h + l—p + k. According to ExamplejSland an earlier observation, 
the sequence under consideration satisfies any linear recurrence relation which has a 
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multiple of (l+a;)''"'^ as characteristic polynomial. Those characteristic polynomials 
(assumed monic here) which have degree h form an affine subspace of ¥p[x] of 
dimension h — p + k, and hence span a linear subspace of dimension h — p + k + 1. 
It follows that these account for all solutions of the system (O , which is the desired 
conclusion. 

It is also possible to use Lemma El to prove Theorem In fact, the weaker 
version of Lemma El given in |HBKOO| . where deg(/) < p, would suffice for that. 

4. An APPLICATION TO FERMAT CURVES OVER A FINITE FIELD 

Let ¥q be the finite field of q elements and let p be its characteristic. Consider 
the Fermat curve ax"' + by"' — z", expressed in homogeneous coordinates, where 
n > 1 is an integer prime to p, and a,b G ¥* = ¥q\ {0}. A classical estimate on 
the number Nn{a, b, q) of its projective F^-rational points is 

|7V„(a, b,q)-q-l\<{n~ l){n - 2)^. 

This is originally due to Hasse and Davenport |DH85j but is a special case of Weil's 
bound for curves over finite fields. Weil's bound for Fermat curves is easy to prove by 
means of Gauss and Jacobi sums, as well as its generalisation to diagonal equations 
in several variables, see |IR90| . ILN83j or jSma91j . An alternative proof is based 
on the character theory of a finite Frobenius group, see jFei67l Section 26] for the 
basic argument and jMataj for a refinement. 

Weil's upper bound for iV„(a, 6, q) is not optimal when n (and with it the genus 
of the curve) is relatively large with respect to q. Better upper bounds in this 
situation were found by Garcia and Voloch, using tools from algebraic geometry. 
According to |GV88I Corollary 1], rewritten here after elementary calculations, if s 
is an integer such that 1 < s < n — i and sn < p then 

(4) iV„(a, b, q) < + 7T3 j " + ' s + 3 + 

where d is the number of Fg-rational points of the curve with xyz — 0. Garcia and 
Voloch pointed out that their bounds l@J hold in more general circumstances where 
the assumption sn < p may not be satisfied, and described those circumstances in 
detail for the cases s = 1, 2. In particular, the case s = 1 of Q), which reads 

(5) iV„(a, b, q) < (nin + q - 1) - d{n ~ 2))/2, 

is valid without the assumption n < p, for p odd, except when n has the form 
n = (g— l)/(r— 1) for some subfield of F^ (which are true exceptions). Bound jS} 
is better than Weil's upper bound, roughly, when n is larger than ^/q/2. In Corol- 
lary ^2 we establish bound jSJ under the assumptions that n divides q — I (which 
is harmless in view of the next paragraph) and that n > (g — l)/(p — 1). 

The set G of nth powers in F* coincides with the set of mth powers, where 
m = {n,q — 1), and is the subgroup of F* of order {q — l)/m. Setting {a, f3) aa" 
gives an m^-to-one map of the set of pairs {a, f3) G F* x F* with aa" + 6/3" = 1 onto 
the set aG n (1 — bG). Consequently, we have Nn{a, b, q) = m'^\aG n (1 — bG) \ + d, 
where d is the number of projective F^-rational points of the curve ax" + by" = 
z" with xyz = 0. However, it easy to see that d coincides with the number of 
projective Fg-rational points of the curve ax"^ + by™ — z™ with xyz — 0, and hence 
Nn{a,b,q) = Nm{a,b,q). Since Garcia and Voloch's bounds (as well as Weil's 
bound) do not increase by replacing n with m (and leaving d unchanged), it is no 
loss to assume that n divides g — 1 in the sequel. In the next result we use LemmaEl 
to produce an upper bound for \aG n (1 — bG)\. The first part of the argument is 
analogous to the proof of Theorem 2 in |Matb| . 
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Theorem 12. Let G be a subgroup o/F* with \G\ < p — 1, and let a,b e ¥*. Set 
e = 0,1,2,3 according as none, one, two or all three of a, b and —a/b (counting 
repetitions) belong to G. Then \aG n (1 - bG)] < (|G| + 1 - e)/2. 

Proof. The elements of the cosets aG and bG of G in F* are the roots of the 
polynomials — and — b^ , where k = \G\. Consequently, the elements of 
aGn (1 — bG) are the roots of the greatest common divisor {x^ — a^, (1 — xY — b^), 
which we write in the form {x^ — a'^)/ f{x), where f{x) — n^gaG\(i-6G) ^ 0- 
Hence \aG n (1 — 6G)| ~ k — h, where h = deg(/). There exists a polynomial 
g{x) G Fg[x], necessarily of degree h and with leading coefRcient (—1)'^, such that 

fix) 

and hence 

(6) f{x){l - x)^- = b'^fix) - a''g{x) + x^g{x). 

The polynomial f{x){l — x)^ has 1 as a root with multiplicity exactly fc or fc + 1 
according as a ^ G or a G G. According to Lemma El its weight is at least fc + 1 
in the former case, and at least + 2 in the latter. However, the polynomial at 
the right-hand side of © has weight at most 2/i + 2. Consequently, in any case we 
have 2/i + 2 > fc + 1, that is, fc — ft. < (fc + l)/2. This is the desired conclusion in 
case e = 0. 

The remaining cases are established by taking into account whether a G G, and 
noting that the right-hand side of © has actually weight at most 2h + 1 \i either 
b or —a/b belongs to G, and at most 2h if both do. In fact, if & € G then g{x) has 
as a root, and hence has no constant term, while if —a/b e G then b^ f{x) and 
a^g{x) have the same leading coefficient. □ 



Remark 13. We sketch a minor variation of the proof of Theorem^] which empha- 
sizes the connection with the linear recurrence relations for binomial coefficients dis- 
cussed in the previous section. For simplicity we restrict ourselves to the case e = 0. 
Expanding the product on the left-hand side of Q and writing f{—x) = X]j=o fj-'^'' 
we obtain that 

for each integer s such that x"^'^ has coefficient zero in the polynomial at the right- 
hand side of ©. This certainly holds for 1 < s < k — h— 1, and hence the sequence 
of binomial coefRcients (*^) modulo p, restricted to the range 1 < i < k—l, satisfies 
a linear recurrence relation of order h, with characteristic polynomial prime to x+1. 
According to Theorem^|we have 2h > k — 2, and the conclusion follows. 

Corollary 14. Let q be a power of the prime p, n a divisor of q — 1 with n > 
{q — l)/{p — 1), and a, 6 £ F*. Then the Fermat curve ax" + by" — z" has at most 
{n{n + p — 1) — d{n — 2))/2 projective ¥ p-rational points, wfiere d is the number of 
points with xyz — 0. 

Proof. The number of projective Fg-rational points of the curve with xyz ^ equals 
n^\aG n (1 — bG)\, where G is the subgroup of F* of order {q — l)/n. According 
to Theorem 1121 this number is at most {n{q — 1 + ri — en)/2. Adding to this the 
number of points with xyz = 0, which is d = en, we reach the conclusion. □ 
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